summaryrefslogtreecommitdiff
path: root/source4
Commit message (Expand)AuthorAgeFilesLines
* s4-drsuapi: Clarify role of drs_security_access_check_nc_root()Andrew Bartlett2023-02-031-1/+5
* s4-rpc_server: Pre-check destination_dsa_guid in GetNCChanges for validityAndrew Bartlett2023-02-031-3/+39
* s4-drsuapi: Use samdb_get_ntds_obj_by_guid() to find RODC in REPL_SECRETAndrew Bartlett2023-02-031-3/+9
* s4-dsdb: Require that the NTDS object is an nTDSDSA objectclassAndrew Bartlett2023-02-031-1/+1
* s4-dsdb: Split samdb_get_ntds_obj_by_guid() out of samdb_is_rodc()Andrew Bartlett2023-02-031-12/+47
* s4-rpc_server/drsuapi: Return correct error code for an invalid DN to EXOP_RE...Andrew Bartlett2023-02-031-0/+14
* s4-drs: Make drs_ObjectIdentifier_to_dn() safer and able to cope with DummyDN...Andrew Bartlett2023-02-033-29/+165
* s4-dsdb: rework drs_ObjectIdentifier_to_dn() into drs_ObjectIdentifier_to_dn_...Andrew Bartlett2023-02-034-30/+132
* s4-rpc_server/drsuapi: Use dsdb_normalise_dn_and_find_nc_root()Andrew Bartlett2023-02-031-3/+9
* s4-dsdb: Add dsdb_normalise_dn_and_find_nc_root() around dsdb_find_nc_root()Andrew Bartlett2023-02-031-2/+33
* s4-dsdb: Add better debugging to dsdb_objects_have_same_nc()Andrew Bartlett2023-02-031-4/+4
* s4-dsdb: Make dsdb_find_nc_root() first try and use DSDB_CONTROL_CURRENT_PART...Andrew Bartlett2023-02-031-3/+234
* s4-dsdb: Schedule SD propegation only after successful renameAndrew Bartlett2023-02-031-39/+95
* s4-selftest/drs: Confirm GetNCChanges REPL_SECRET works with a DummyDN and re...Andrew Bartlett2023-02-032-1/+49
* s4-selftest/drs: Confirm GetNCChanges full replication works with a DummyDN a...Andrew Bartlett2023-02-031-2/+50
* s4-selftest/drs: Confirm GetNCChanges REPL_OBJ works with a DummyDN and real ...Andrew Bartlett2023-02-031-6/+74
* s4-selftest/drs Allow re-run of DRS tests after failed cleanupAndrew Bartlett2023-02-031-1/+2
* s4-selftest/drs Allow some DRS tests to operate against an IPAndrew Bartlett2023-02-034-29/+18
* s4-selftest/drs Add test of expected return code for invaid DNs in GetNCChangesAndrew Bartlett2023-02-032-3/+83
* s3: smbd: Add test to show smbd crashes when doing an FSCTL on a named stream...Jeremy Allison2023-01-232-0/+76
* CVE-2022-38023 s4:rpc_server/netlogon: Move schannel and credentials check fu...Samuel Cabrero2023-01-232-546/+2
* CVE-2022-38023 s4:rpc_server:wscript: Reformat following pycodestyleSamuel Cabrero2023-01-231-122/+168
* s4: libcli: Ignore errors when getting A records after fetching AAAA records.Jeremy Allison2023-01-161-6/+8
* s4: torture: Add an async SMB2_OP_FLUSH + SMB2_OP_FLUSH test to smb2.compound...Jeremy Allison2023-01-161-0/+115
* s4: torture: Add an async SMB2_OP_FLUSH + SMB2_OP_CLOSE test to smb2.compound...Jeremy Allison2023-01-162-0/+118
* s4: torture: Show return value for smbc_getxattr() is incorrect (returns >0 f...Jeremy Allison2023-01-161-0/+94
* s4:lib/messaging: fix interaction between imessaging_context_destructor and i...Stefan Metzmacher2023-01-132-0/+16
* s4:libnet: correctly handle gnutls_pbkdf2() errorsStefan Metzmacher2022-12-141-1/+4
* s4:libnet: fix error string for failing samr_ChangePasswordUser4()Stefan Metzmacher2022-12-141-1/+1
* CVE-2022-37966 s4:kdc: apply restrictions of "kdc supported enctypes"Stefan Metzmacher2022-12-141-2/+10
* CVE-2022-37966 param: let "kdc default domain supportedenctypes = 0" mean the...Stefan Metzmacher2022-12-141-1/+5
* CVE-2022-37966 s4:kdc: announce PA-SUPPORTED-ETYPES like windows.Stefan Metzmacher2022-12-143-71/+151
* CVE-2022-37966 s4:libnet: allow python bindings to force setting an nthash vi...Stefan Metzmacher2022-12-141-3/+15
* CVE-2022-37966 s4:libnet: add support LIBNET_SET_PASSWORD_SAMR_HANDLE_18 to s...Stefan Metzmacher2022-12-142-0/+80
* CVE-2022-37966 s4:libnet: initialize libnet_SetPassword() arguments explicitl...Stefan Metzmacher2022-12-142-2/+4
* CVE-2022-37966 s4:kdc: use the strongest possible keysStefan Metzmacher2022-12-141-15/+8
* CVE-2022-37966 s4:pydsdb: add ENC_HMAC_SHA1_96_AES256_SKStefan Metzmacher2022-12-141-0/+1
* CVE-2022-37966 s4:kdc: also limit the krbtgt history to their strongest keysStefan Metzmacher2022-12-141-0/+2
* CVE-2022-37966 kdc: Assume trust objects support AES by defaultJoseph Sutton2022-12-141-1/+2
* CVE-2022-37966 kdc: Implement new Kerberos session key behaviour since ENC_HM...Andrew Bartlett2022-12-144-25/+236
* CVE-2022-37966 selftest: Run S4U tests against FL2003 DCJoseph Sutton2022-12-141-2/+7
* CVE-2022-37966 selftest: Add tests for Kerberos session key behaviour since E...Joseph Sutton2022-12-141-4/+12
* CVE-2022-37967 Add new PAC checksumJoseph Sutton2022-12-144-5/+50
* CVE-2022-37966 tests/krb5: Add a test requesting tickets with various encrypt...Joseph Sutton2022-12-141-0/+4
* CVE-2022-38023 s4:rpc_server/netlogon: implement "server schannel require sea...Stefan Metzmacher2022-12-141-1/+243
* CVE-2022-38023 s4:rpc_server/netlogon: add a per connection cache to dcesrv_n...Stefan Metzmacher2022-12-141-40/+153
* CVE-2022-38023 s4:rpc_server/netlogon: make sure all dcesrv_netr_LogonSamLogo...Stefan Metzmacher2022-12-141-7/+29
* CVE-2022-38023 s4:rpc_server/netlogon: split out dcesrv_netr_check_schannel()...Stefan Metzmacher2022-12-141-33/+51
* CVE-2022-38023 s4:rpc_server/netlogon: debug 'reject md5 servers' and 'allow ...Stefan Metzmacher2022-12-141-0/+143
* CVE-2022-38023 s4:rpc_server/netlogon: add 'server reject md5 schannel:COMPUT...Stefan Metzmacher2022-12-141-3/+55